The largest cryptocurrency theft in history may have been executed with the help of artificial intelligence. According to a report from Bloomberg News on Monday, the hackers responsible for the $6.3 billion breach of Binance are part of a North Korean state-sponsored group known as TraderTraitor. This group appears to use AI to identify and exploit vulnerabilities in high-value crypto companies.
TraderTraitor targets high-value firms
The FBI has accused TraderTraitor of carrying out the hack last week. Experts estimate the group consists of only about a dozen members who have been trained from a young age to target “big game” in the crypto sector. Instead of stealing from individual investors, they focus on crypto-related businesses.
Park Seong-su, a staff threat researcher at Zscaler, told Bloomberg that the group looks for a massive haul. They gain a deep understanding of a company’s infrastructure and then tamper with fund transfer processes to execute large-scale thefts. The use of new AI advances has significantly lowered the barrier to entry for these skills while increasing the speed of operations.
Nick Carlsen, a senior investigator at TRM Labs, noted that the techniques used in the Binance hack indicate a shift toward AI. This breach surpasses the group’s previous record, which was the theft of $1.5 billion from the Bybit exchange last year.
Automated laundering across blockchains
Dr. Tom Robinson, Chief Scientist and Co-Founder of Elliptic, provided details on how the hackers are moving the stolen funds. He described the laundering process as highly complex and clearly automated. In less than four days, the group used approximately 12,000 wallets across 11 different blockchains.
Robinson noted that the hackers created roughly one new wallet every 25 seconds, resulting in more than 40,000 transactions. He suggested that most of the funds are likely still held by North Korea, while those being laundered may be moving through Chinese money laundering networks, which the regime has used in the past.
The scale of the breach has raised concerns about corporate governance. Chris Dimitriadis, chief global strategy officer at ISACA, stated that the financial exposure created by such hacks demands board-level oversight. He emphasized that this is ultimately a governance question that belongs in the boardroom, not just with the security team.
Source: PYMNTS
